Dr. Stephen Henson
679ab7c39e
Update STATUS, modify ssl.h so mkdef.pl will pick up prototypes and
...
add x509v3.h to mkdef.pl list of include files.
1999-01-30 17:35:01 +00:00
Ben Laurie
f33fbc2e1e
More pissing about to get pem.h to behave properly.
1999-01-30 14:05:52 +00:00
Ben Laurie
59ff713462
Break circular dependency between pem and err.
1999-01-30 13:40:34 +00:00
Ralf S. Engelschall
ae3d365f99
Ignore crypto/x509v3/lib
1999-01-30 13:26:41 +00:00
Ben Laurie
31df0990a1
Update dependencies.
1999-01-30 12:49:44 +00:00
Ben Laurie
5f0451daa2
Add dependencies.
1999-01-30 12:15:11 +00:00
Ralf S. Engelschall
4c441f30bb
Update
1999-01-30 12:06:16 +00:00
Ben Laurie
fc8c1a5c67
Update dependencies.
1999-01-30 12:05:42 +00:00
Ralf S. Engelschall
154adc8963
Change address now that we've the mailing lists established
1999-01-30 11:52:04 +00:00
Ralf S. Engelschall
e04a6c2b35
Add CygWin32 platform information to Configure script.
...
Submitted by: Alan Batie <batie@aahz.jf.intel.com>
1999-01-30 11:50:48 +00:00
Ralf S. Engelschall
0172f988c7
Fixed ms/32all.bat script: no_asm' ->
no-asm'
...
Submitted by: Rainer W. Gerling <gerling@mpg-gv.mpg.de>
Reviewed by: Ralf S. Engelschall
1999-01-30 11:36:05 +00:00
Dr. Stephen Henson
79dfa97555
New program 'nseq' added to apps to allow Netscape certificate sequences to
...
be pulled apart and built.
1999-01-29 23:34:19 +00:00
Dr. Stephen Henson
9fe84296a4
Allow the -certfile argument to be used multiple times in crl2pkcs7.
...
Also fix typos in the usage messages: "inout" instead of "input".
1999-01-29 01:53:55 +00:00
Ralf S. Engelschall
288cb84fb4
Fill in more contents for the openssl(1) manpage.
1999-01-28 14:50:10 +00:00
Ralf S. Engelschall
7ae01d4adc
One more incorrect name in usage page
1999-01-28 14:48:31 +00:00
Ralf S. Engelschall
b6cff93dcf
Fix names in usage page of s_time, s_server and s_client
1999-01-28 14:44:08 +00:00
Mark J. Cox
a0a5407901
Fixes to BN code. Previously the default was to define BN_RECURSION
...
but the BN code had some problems that would cause failures when
doing certificate verification and some other functions.
Submitted by: Eric A Young from a C2Net version of SSLeay
Reviewed by: Mark J Cox
PR:
1999-01-28 10:40:38 +00:00
Dr. Stephen Henson
8938272b32
Remember to add the new file this time :-)
1999-01-28 00:34:42 +00:00
Dr. Stephen Henson
92c046cac0
Add ASN1 code for netscape certificate sequences.
1999-01-28 00:16:44 +00:00
Dr. Stephen Henson
a27598bf7e
Add a few extended key usage OIDs.
1999-01-26 23:13:14 +00:00
Dr. Stephen Henson
b2347661ce
Still more X509 V3 stuff. Modify ca.c to work with the new code and modify
...
openssl.cnf for the new syntax.
1999-01-26 01:19:27 +00:00
Ben Laurie
fd9d35f56e
Oops. One header too many.
1999-01-25 21:36:51 +00:00
Ben Laurie
f3d2e56bb3
Update dependencies.
1999-01-25 21:25:54 +00:00
Ben Laurie
8a5222113b
Declare correctly on FreeBSD.
1999-01-25 21:20:57 +00:00
Ben Laurie
a224de3f5d
Reduce header dependencies.
1999-01-25 21:19:12 +00:00
Dr. Stephen Henson
f317aa4c9c
More X509 V3 stuff. Add support for extensions in the 'req' application
...
so that: openssl req -x509 -new -out cert.pem
will take extensions from openssl.cnf a sample for a CA is included.
Also change the directory order so pem is nearer the end. Otherwise 'make links'
wont work because pem.h can't be built.
1999-01-25 01:09:21 +00:00
Dr. Stephen Henson
d0cc3d3460
Add file x509v3.err.
1999-01-24 20:58:44 +00:00
Ben Laurie
9535d20282
Make sure people know when they need to rebuild the Makefile.
1999-01-24 18:15:00 +00:00
Ben Laurie
41c62a8e56
Minor constification.
1999-01-24 17:54:23 +00:00
Dr. Stephen Henson
834eeef995
Continuing adding X509 V3 support. This starts to integrate the code with
...
the main library, but only with printing at present. To see this try:
openssl x509 -in cert.pem -text
on a certificate with some extensions in it.
1999-01-24 17:50:32 +00:00
Dr. Stephen Henson
9aeaf1b4a7
Initial addition of new X509 V3 files, tidy of old files.
1999-01-24 00:50:01 +00:00
Ralf S. Engelschall
69d1dfba24
Start keeping track of wishes people make on our mailing lists to make sure we
...
don't forget them and this way we have them bundled together.
1999-01-21 13:01:20 +00:00
Ben Laurie
1bbd21eec5
Correct bracketing error.
1999-01-21 11:46:01 +00:00
Dr. Stephen Henson
9b5cc156f3
Continued patches so certificates and CRLs now can support and use
...
GeneralizedTime.
1999-01-20 00:14:40 +00:00
Ben Laurie
6f93539970
This time, get it right.
1999-01-19 23:25:22 +00:00
Ben Laurie
8039257dbc
Finally lay dependencies to rest (I hope!).
1999-01-19 21:36:31 +00:00
Ben Laurie
b13a155492
Spelling mistake.
1999-01-19 19:18:20 +00:00
Dr. Stephen Henson
fdc71eccec
This is the result of a "make errors" with the new error building functionality
...
in place.
1999-01-18 22:19:46 +00:00
Dr. Stephen Henson
6c8abdd744
New err_code.pl script to retain old error codes. This should allow the use
...
of 'make errors' without causing huge re-organisations of files when a new
code is added.
1999-01-18 22:18:38 +00:00
Ben Laurie
4a66b7e0b2
Ignore auto-generated programs.
1999-01-17 16:28:06 +00:00
Ben Laurie
690ad20a0f
Dispose of generated programs.
1999-01-17 16:27:15 +00:00
Ben Laurie
649cdb7be9
Fix major cockup with short keys in CAST-128.
1999-01-17 16:26:24 +00:00
Dr. Stephen Henson
fdd3b64215
Update CHANGES for GeneralizedTime info.
1999-01-17 15:10:33 +00:00
Ben Laurie
dabba1104b
Correct Linux 1 recognition.
...
Contributed by: Ulf Möller <ulf@fitug.de>
1999-01-17 14:20:20 +00:00
Ben Laurie
f9e6fac357
Oops. Missing NULL frees.
1999-01-17 14:19:31 +00:00
Ben Laurie
512d222830
Remove pointless MD5 hash.
...
Contributed by: Anonymous <nobody@replay.com>
1999-01-17 14:14:41 +00:00
Ben Laurie
2c1ef383ae
Generate an error on an invalid directory.
1999-01-17 14:10:08 +00:00
Dr. Stephen Henson
f6aed2cda6
Time to blow up the source tree :-) This is the beginning of support for
...
GeneralizedTime. At several points PKIX specifies that GeneralizedTime can be
used but OpenSSL doesn't currently support it. This patch adds several files
and a bunch of functions.
Of interest is the ASN1_TIME structure and its related functions. At several
points certificates, CRLs et al specify that a time can be expressed as a
choice of UTCTime and GeneralizedTime. Currently OpenSSL interprets this
(wrongly) as UTCTime because GeneralizedTime isn't supported. The ASN1_TIME
stuff provides this functionality.
Still todo is to trace which cert and CRL points need an ASN1_TIME and modify
the utilities appropriately and of course fix all the bugs.
Note new OpenSSL copyright in the new file a_time.c. I didn't put it in
a_gentm.c because it is a minimally modified form a_utctm.c .
Since this adds new files and error codes you will need to do a 'make errors'
at the top level to add the new codes.
1999-01-17 00:13:14 +00:00
Ben Laurie
c3ae9a4851
More prototypes.
1999-01-16 18:46:23 +00:00
Ben Laurie
f06b01eb62
More prototypes.
1999-01-16 17:56:00 +00:00